Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NFrmRuo0rSaIrKL90abzNANWSV4.cer
File: NFrmRuo0rSaIrKL90abzNANWSV4.cer (raw, json)
Hash identifier: AWRSLmbLTg642SBx5LR00vuR6n0jDmzw1dFoDyxvnVU=
Subject key identifier: 34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 019423D806A5681EB48AD228A64E442C4EDA
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Wed 01 Jan 2025 21:49:07 +0000
Certificate not after: Wed 01 Jul 2026 00:00:00 +0000
Subordinate resources: IP: 185.120.172.0/22
IP: 2a06:9c00::/29
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:23:d8:06:a5:68:1e:b4:8a:d2:28:a6:4e:44:2c:4e:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 21:49:07 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=345ae646ea34ad2688aca2fdd1a6f3340356495e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:8c:0d:ea:b7:39:f4:8f:20:fe:a6:65:e1:b0:
88:3f:d6:9d:06:c4:97:c1:41:cb:03:8d:c0:78:2c:
ca:16:6a:43:23:bd:cf:e8:9f:1d:17:6a:49:08:b3:
09:e9:02:b3:f7:c2:2f:09:e7:9e:e2:25:cc:e9:c1:
0e:01:a0:a8:a8:55:df:95:9a:44:93:eb:38:92:d4:
33:e6:79:c2:5c:08:0d:8f:ad:59:0d:6a:85:9d:0d:
22:b6:ad:37:ab:ba:c6:b1:04:5a:14:fe:47:5d:e8:
04:89:a2:f7:f8:35:c7:ae:ee:51:9b:61:b2:59:90:
fc:a0:3f:a7:89:cf:8e:5e:17:09:03:fb:c9:17:98:
cf:f8:70:f6:74:fc:1b:7d:e1:99:30:ac:56:fc:18:
52:89:a7:29:1c:e0:e0:b0:5f:aa:b6:08:5b:dd:98:
6d:a8:3d:88:87:b3:07:61:a0:59:33:f3:a2:18:bb:
58:c1:33:2a:24:19:70:ef:81:56:00:e6:01:a3:19:
d7:61:17:ae:21:3d:33:a6:02:8c:a3:a8:dc:46:50:
e7:3b:d1:45:b5:83:d5:5e:8f:ba:93:e9:bb:8e:5f:
8e:6e:cd:9d:e1:00:a6:06:08:af:84:9c:8a:ae:5a:
05:8d:a7:33:97:8d:42:df:ab:54:82:f8:08:03:63:
96:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:5A:E6:46:EA:34:AD:26:88:AC:A2:FD:D1:A6:F3:34:03:56:49:5E
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/3cc135-f166-42eb-8203-f49120bed51c/1/NFrmRuo0rSaIrKL90abzNANWSV4.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.120.172.0/22
IPv6:
2a06:9c00::/29
Signature Algorithm: sha256WithRSAEncryption
19:8c:22:96:6d:1f:0e:0e:4e:8e:cc:6e:20:16:1d:bb:4e:21:
40:fd:b2:36:0a:2e:6b:e3:d1:b8:38:8d:65:d3:6d:81:dc:80:
0d:c2:96:0e:0d:0e:2d:06:c7:ff:1a:0b:eb:1c:4f:53:3b:9c:
51:2f:f2:fd:5f:c0:5c:03:71:03:b8:3d:bd:74:c5:21:71:47:
f5:09:46:97:5d:21:f5:14:fa:85:5f:5c:19:7f:00:34:f9:13:
62:5c:59:0b:3c:ea:0d:f2:ec:7d:aa:66:a8:c9:37:91:e7:85:
06:6f:55:86:e8:41:72:7c:e9:5d:cf:74:9e:eb:be:4a:24:b6:
85:33:a9:29:96:4f:84:fa:f5:69:eb:14:b5:53:a5:00:87:16:
fd:f1:ce:6e:84:71:7a:9b:82:ec:f3:f2:f6:8a:28:f8:8c:1a:
98:68:95:e5:fb:ec:b2:53:be:ea:a0:95:0a:12:6f:9f:a7:9e:
00:0b:5b:8a:82:44:6d:52:a4:01:f5:4f:82:c8:d9:1b:c3:fc:
db:2c:91:6b:44:e2:4f:45:f0:29:9b:f3:26:73:08:dd:87:49:
d4:cf:94:47:6d:77:65:26:e3:1d:94:3a:78:32:50:37:12:da:
23:97:c4:9f:83:dd:15:3b:84:b3:f2:a0:d9:c4:f5:cf:fb:ea:
f7:2c:bb:93
-----BEGIN CERTIFICATE-----
MIIFhzCCBG+gAwIBAgISAZQj2AalaB60itIopk5ELE7aMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJhOTRhOGRkNTU0YWU3MDEwNzIwOTljNzBiNjQwNzU1NWRk
ZGU2NjkwHhcNMjUwMTAxMjE0OTA3WhcNMjYwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzNDVhZTY0NmVhMzRhZDI2ODhhY2EyZmRkMWE2ZjMzNDAzNTY0OTVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1YwN6rc59I8g/qZl4bCIP9adBsSX
wUHLA43AeCzKFmpDI73P6J8dF2pJCLMJ6QKz98IvCeee4iXM6cEOAaCoqFXflZpE
k+s4ktQz5nnCXAgNj61ZDWqFnQ0itq03q7rGsQRaFP5HXegEiaL3+DXHru5Rm2Gy
WZD8oD+nic+OXhcJA/vJF5jP+HD2dPwbfeGZMKxW/BhSiacpHODgsF+qtghb3Zht
qD2Ih7MHYaBZM/OiGLtYwTMqJBlw74FWAOYBoxnXYReuIT0zpgKMo6jcRlDnO9FF
tYPVXo+6k+m7jl+Obs2d4QCmBgivhJyKrloFjaczl41C36tUgvgIA2OWXQIDAQAB
o4ICkzCCAo8wHQYDVR0OBBYEFDRa5kbqNK0miKyi/dGm8zQDVkleMB8GA1UdIwQY
MBaAFCqUqN1VSucBByCZxwtkB1Vd3eZpMA8GA1UdEwEB/wQFMAMBAf8wDgYDVR0P
AQH/BAQDAgEGMGAGCCsGAQUFBwEBBFQwUjBQBggrBgEFBQcwAoZEcnN5bmM6Ly9y
cGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvYWNhL0twU28zVlZLNXdFSElKbkhDMlFI
VlYzZDVtay5jZXIwggEjBggrBgEFBQcBCwSCARUwggERMF0GCCsGAQUFBzAFhlFy
c3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxULzQzLzNjYzEz
NS1mMTY2LTQyZWItODIwMy1mNDkxMjBiZWQ1MWMvMS8wfAYIKwYBBQUHMAqGcHJz
eW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvNDMvM2NjMTM1
LWYxNjYtNDJlYi04MjAzLWY0OTEyMGJlZDUxYy8xL05Gcm1SdW8wclNhSXJLTDkw
YWJ6TkFOV1NWNC5tZnQwMgYIKwYBBQUHMA2GJmh0dHBzOi8vcnJkcC5yaXBlLm5l
dC9ub3RpZmljYXRpb24ueG1sMFkGA1UdHwRSMFAwTqBMoEqGSHJzeW5jOi8vcnBr
aS5yaXBlLm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvS3BTbzNWVks1d0VISUpuSEMy
UUhWVjNkNW1rLmNybDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMC4GCCsGAQUF
BwEHAQH/BB8wHTAMBAIAATAGAwQCuXisMA0EAgACMAcDBQMqBpwAMA0GCSqGSIb3
DQEBCwUAA4IBAQAZjCKWbR8ODk6OzG4gFh27TiFA/bI2Ci5r49G4OI1l022B3IAN
wpYODQ4tBsf/GgvrHE9TO5xRL/L9X8BcA3EDuD29dMUhcUf1CUaXXSH1FPqFX1wZ
fwA0+RNiXFkLPOoN8ux9qmaoyTeR54UGb1WG6EFyfOldz3Se675KJLaFM6kplk+E
+vVp6xS1U6UAhxb98c5uhHF6m4Ls8/L2iij4jBqYaJXl++yyU77qoJUKEm+fp54A
C1uKgkRtUqQB9U+CyNkbw/zbLJFrROJPRfApm/Mmcwjdh0nUz5RHbXdlJuMdlDp4
MlA3Etojl8Sfg90VO4Sz8qDZxPXP++r3LLuT
-----END CERTIFICATE-----
Generated at Sat Apr 5 07:34:04 2025 by rpki-client